Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa
File:                     beff196d-154a-3caa-9c66-d302cb8c90d6.roa (raw, json)
Hash identifier:          EE3OxG5xvpZV7BLyoPcURXy6fGnPsJpSWsXt0Xui49I=
Subject key identifier:   25:8D:19:0F:CD:4F:25:54:AE:3B:B6:5F:A4:43:DB:C8:49:20:78:C6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F498882AB6FA06B6F9AF26800
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13737
IP address blocks:        74.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:82:ab:6f:a0:6b:6f:9a:f2:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17707e58-f249-4905-a124-2e7f0f9eb89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:78:78:fd:cf:45:78:55:56:3e:d2:03:64:
                    39:a2:0f:80:9c:3b:88:99:aa:03:f8:a7:20:b6:1b:
                    ba:9c:0d:c4:55:01:14:b5:cb:45:d3:3f:d3:e6:77:
                    a7:d5:1d:b4:8b:43:fa:05:32:51:d6:43:5d:85:75:
                    f6:d3:04:17:93:95:bc:96:37:ea:68:03:8e:74:0f:
                    9e:db:62:17:28:0f:ad:95:fe:5e:2d:9f:9b:82:6c:
                    01:a9:09:98:a6:f2:c2:0a:f4:81:7e:f4:36:96:e9:
                    3f:aa:71:4b:51:ef:17:fc:f2:29:e6:f2:89:3e:5a:
                    a7:08:33:20:3f:bb:f2:82:8d:3d:e2:73:01:2c:3d:
                    73:b2:e9:72:ab:ed:9d:d1:24:ee:a4:4e:6c:c2:2e:
                    c2:62:2d:bb:31:5b:07:0c:5a:3c:34:1b:c5:23:ba:
                    ea:29:5e:57:dd:6d:be:9a:ec:51:4f:7a:bc:bc:89:
                    59:b4:b3:cc:72:c4:12:f0:6a:37:10:6e:79:11:2a:
                    b7:2b:0a:c7:04:2b:04:3d:b1:cb:fb:d4:02:d7:d4:
                    6b:8f:12:87:a6:46:87:d0:e9:5e:85:91:ef:b4:53:
                    02:de:0e:51:5f:03:84:51:c5:4e:46:c8:53:5e:5d:
                    73:3e:8b:9c:e7:12:73:41:5b:a3:24:dd:3c:42:72:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8D:19:0F:CD:4F:25:54:AE:3B:B6:5F:A4:43:DB:C8:49:20:78:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/beff196d-154a-3caa-9c66-d302cb8c90d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:e3:3d:22:81:5d:da:f7:71:c4:2d:76:29:ee:6e:26:89:
         6e:09:24:fa:0f:60:c0:66:10:b1:b4:64:d2:bc:34:1e:e0:48:
         c5:af:b0:13:42:80:c5:42:6d:e4:49:70:06:a2:1f:2e:71:db:
         6f:c2:d0:54:6a:e6:1a:ec:d0:f1:6a:8d:fb:32:77:64:81:cc:
         bb:2d:33:8c:4c:2e:7d:5d:e8:13:63:72:c0:02:8b:38:af:7f:
         c5:82:a5:73:df:89:98:a2:d4:97:a5:de:2a:9b:a2:66:d1:e5:
         0c:7b:24:67:20:9a:58:1e:bb:0b:ed:d2:6a:42:20:0e:c9:8f:
         aa:3c:68:7b:68:5d:b6:e9:fc:f9:8d:a4:d8:95:a7:ad:0c:a2:
         3f:99:03:5e:c3:63:8f:de:3f:da:02:e6:3c:16:43:a3:29:25:
         0e:b4:6a:f8:06:95:71:21:14:a1:0e:91:32:4e:22:c0:6f:73:
         89:06:77:ed:73:a6:b5:40:8a:88:ce:42:db:aa:01:32:80:31:
         52:f2:1e:a6:1c:5f:71:60:8e:13:fb:c3:aa:f2:c2:4d:15:38:
         16:26:70:8c:1a:71:9d:c6:38:51:ca:83:69:25:8e:04:be:55:
         40:6e:1b:f9:65:40:31:81:e1:00:44:da:b6:66:33:79:93:b1:
         a7:25:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:59:09 2026 by rpki-client